3 casos · pág. 1/1
EG Secure Solutions warns that CVE-2026-106931, an OS command injection flaw in the statistics function of SiteGuard Server Edition, a Japanese host-based WAF, is being exploited in the wild. Successful exploitation lets an attacker run commands as root or SYSTEM on the server hosting the product. The flaw is rated CVSS 4.0 8.5 and CVSS 3…
Microsoft Threat Intelligence reports active exploitation of CVE-2026-73570, a command injection flaw in Zimbra Collaboration Suite that allows unauthenticated, zero-click compromise of internet-facing email servers. Attackers deployed webshells, escalated privileges, harvested authentication secrets and staged mailbox data across organiz…
Cloudflare published defensive guidance following the disclosure of actively exploited Citrix NetScaler vulnerabilities. CVE-2026-88771 allows unauthenticated command execution on affected appliances, including in the default configuration. CVE-2026-88772 affects configurations using DTLS. Citrix's September 27, 2026 bulletin reported obs…
